---
typeId: req
recordId: benac-sec-003
fields:
  title: Secret metadata separation
  statement: Secret references and metadata may be stored as local documents, but
    raw secret material shall be stored in a protected host-specific vault or
    equivalent protected storage mechanism.
  rationale: Different platforms have different secure storage options.
  verification: Document store does not contain raw secret value.
  testable: true
  status: draft
  area: BENAC-SEC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.13 Secrets, protected local state, and redaction
  order: 150
---
